Configuring An Ethernet Frame Header Acl - 3Com 4210G Series Configuration Manual

<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0
0.0.0.255 destination-port eq 80
# Verify the configuration.
[Sysname-acl-adv-3000] display acl 3000
Advanced ACL 3000, named -none-, 1 rule,
ACL's step is 5
rule 0 permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255
destination-port eq www (5 times matched)

Configuring an Ethernet Frame Header ACL

Ethernet frame header ACLs match packets based on Layer 2 protocol header fields such as source
MAC address, destination MAC address, 802.1p priority (VLAN priority), and link layer protocol type.
They are numbered in the range 4000 to 4999.
Configuration Prerequisites
If you want to reference a time range in a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure an Ethernet frame header ACL:
To do...
Enter system view
Create an Ethernet
frame header ACL
and enter its view
Create or modify a
rule
Set the rule
numbering step
Configure a
description for the
Ethernet frame
header ACL
Configure a rule
description
Use the command...
system-view
acl number acl-number [ name
acl-name ] [ match-order { auto |
config } ]
rule [ rule-id ] { deny | permit } [ cos
vlan-pri | dest-mac dest-addr
dest-mask | lsap lsap-code
lsap-wildcard | source-mac
sour-addr source-mask | time-range
time-range-name | type type-code
type-wildcard ] *
step step-value
description text
rule rule-id comment text
14-6
Remarks
––
Required
The default match order is config.
If you specify a name for an IPv4
ACL when creating the ACL, you can
use the acl name acl-name
command to enter the view of the
ACL later.
Required
To create or modify multiple rules,
repeat this step.
Note that the lsap keyword is not
supported if the ACL is to be
referenced by a QoS policy for traffic
classification.
Optional
5 by default
Optional
By default, an Ethernet frame header
ACL has no ACL description.
Optional
By default, an Ethernet frame header
ACL rule has no rule description.